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Top Stories 

• Authorities are assessing the total amount of damage and how long it will take before the 
Southcross Energy Natural Gas Plant near Gregory, Texas, will resume operations 
following an explosion at the plant January 20. - KRIS 6 Corpus Christi (See item 1) 

• The U.S. Centers for Disease Control and Prevention reported January 19 that elevated 
levels of benzene were found in water samples from a treatment plant that serves 
approximately 6,000 people in Glendive, Montana, following a Yellowstone River pipeline 
spill January 17 . - Associated Press (See item 17) 

• A gunman died from a self-inflicted gunshot wound after shooting and killing a doctor at 
Brigham and Women’s Hospital in Boston January 20. - CNN (See item 18) 

• Three New York residents, including 1 former U.S. Department of Justice and Internal 
Revenue Service (IRS) employee, were charged in federal court in Brooklyn January 15 for 
defrauding the U.S. government of more than $3.4 million by filing false claims. - Yuma 
Arizona News (See item 21) 
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Energy Sector 



1. January 21, KRIS 6 Corpus Christi - (Texas) Plant fire near Gregory sends fireballs 
high into the sky. Authorities are assessing the total amount of damage and how long 
it will take before the Southcross Energy Natural Gas Plant near Gregory, Texas, will 
resume operations following an explosion at the plant January 20. Pipelines that 
provide gas to the facility were shut off and the fire burned itself out after several 
hours. 

Source: http://www.kristv.com/news/plant-fire-near-gregorv-sends-fireballs-high-into- 
the-sky/ 

2. January 20, U.S. Environmental Protection Agency - (National) Three Shell Oil 
Company affiliates settle with EPA over violations of vehicle fuel standards. Three 
companies affiliated with Shell Oil Company, Deer Park Refining Limited Partnership, 
Motiva Enterprises LLC, and Equilon Enterprises LLC, reached a settlement with the 
U.S. Environmental Protection Agency January 20 to resolve Clean Air Act violations 
which include selling gasoline and diesel fuel that did not comply with federal 
standards. The companies will pay a $900,000 penalty for violations that resulted in 
excess emissions of harmful air pollutants from motor vehicles. 

Source: 

http ://yosemite .epa. gov/opa/admpress .nsf/0/9c5 5 6f 1 ffe7 f3c048525 7 dd30067 df97 

3. January 20, Times of Northwest Indiana - (Indiana) Officials investigating release 
into Little Calumet River. Enbridge Energy LLC halted its hydrostatic testing process 
and is working with the Indiana Department of Environmental Management to install a 
filtration system following the release of a blue dye into the Little Calumet River 
system over the weekend of January 17. The utility released the dye into the 
Schererville sanitary sewers following testing of new tanks and officials reported that 
the dye is nonhazardous and is safe for use in live fish ponds. 

Source: http://www.nwitimes.com/news/local/lake/officials-investigating-release-into- 
httle-calumet-river/article e770e62c-d7a5-56d4-924a-a8ed09fe2359.html 



For additional stories, see items 24 and 27 
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Chemical Industry Sector 

See item 24 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

See items 24 and 27 
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Defense Industrial Base Sector 

See item 24 
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Financial Services Sector 

4. January 20, McAllen Monitor - (Texas) Former McAllen-based CEO admits to 
$26M wire fraud. A former chief executive of USA Dry Van Logistics, a McAllen- 
based trucking company, pleaded guilty January 20 to his role in a wire fraud scheme 
that defrauded GE Capital Corporation out of more than $26 million between March 
2008 and January 2010. The former executive admitted to falsifying documentation to 
hide his company’s true financial condition in order to borrow hundreds of thousands 
of dollars every week and allow the company to appear profitable. 

Source: http://www.themonitor.com/news/local/former-mcallen-based-ceo-adrnits-to- 
m-wire-fraud/article b70aa4e8-a 1 Ob- 1 1 e4-8775-57d0 1 6f0fc44.html 

5. January 20, KLTV 7 Tyler - (Texas) ‘Loan Ranger Bandit’ pleads guilty to 13 bank 
robberies. A suspect known as the “Loan Ranger Bandit” pleaded guilty to 13 counts 
of bank robbery in federal court in Waco, Texas, January 16. The suspect admitted to 

1 1 bank robberies in Texas and 2 bank robberies in Arkansas, and is suspected of 
additional bank robberies in Kentucky, Mississippi, and Texas. 

Source: http://www.kltv.com/story/27895106/loan-ranger-bandit-pleads-guiltv-to- 13- 
bank-robberies 

6. January 20, Credit Union Times - (Michigan) Michigan police bust card fraud ring. 
Three suspects in connection to a payment card fraud ring were arraigned in Jackson 
County District Court January 12 on 1 count of criminal enterprise, racketeering 
proceeds and 5 counts of illegal use of sale of a financial device that caused more than 
300 fraud complaints and $100,000 in bogus charges on member credit and debit cards 
from American 1 Credit Union. 

Source: http://www.cutimes.com/2015/01/20/michigan-police-bust-card-fraud-ring 

[ Return to top ] 

Transportation Systems Sector 

7. January 21, Associated Press - (Michigan) Flights resume at Delta County Airport 
after cancelations. Flights were cleared to resume January 20 after the Federal 
Aviation Administration found that an antenna had moved over time and affected the 
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communication line at Delta County Airport in Escanaba January 18, which prompted 
the cancellation of all commercial flights. 

Source: http://www.9andlQnews.com/story/27900786/flights-resume-at-delta-countv- 
airport-after-cancelations 

8. January 21, WCPO 9 Cincinnati - (Ohio) 1-75 reopens one day after deadly 
overpass collapse in Cincinnati. Interstate 75 in Cincinnati reopened January 20 after 
closing January 19 when an overpass collapsed during demolition onto southbound 
lanes, killing a construction worker. Authorities are investigating the incident. 

Source: http://www.wxvz.com/news/l-dead-l-hurt-after-overpass-collapses-onto-i-75- 
in-cincinnati 

9. January 20, KDVR 31 Denver - (Colorado) 1-25 reopens after hours-long closure 
caused by jackknifed truck. The Colorado Department of Transportation closed both 
directions of Interstate 25 in Douglas County for more than 2 hours January 20 after a 
semi-truck lost control, jackknifed, and skidded into the center barrier spilling about 75 
gallons of diesel fuel onto the roadway. Debris from the accident triggered a second 
accident in the southbound lanes. 

Source: http://kdvr.com/2015/01/2Q/4-mile-stretch-of-southbound-i-25-closed-after- 
semi-jackknifes-spills-diesel-fuel/ 

10. January 20, WPTV 5 West Palm Beach - (Florida) Beeline Highway near North 
County Airport open after semi crash. Eastbound lanes on the Beeline Highway in 
Suburban Jupiter, Florida, were closed for 2 hours while westbound lanes were closed 
for 5 hours January 20 after a semi-truck crashed and spilled its load of wood on the 
highway. 

Source: http://www.wptv.com/news/region-n-palm-beach-countv/beeline-highwav- 
closed-near-north-county-airport 

1 1 . January 19, Orange County Register - (California) Freight train derailment causes 
several Metrolink commuter train delays. At least 8 Metrolink trains were delayed 
and redirected January 19 after a BNSF Railway freight train derailed near Corona. 
Source: http://www.ocregister.com/articles/train-648507-metrolink-trains.html 
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Food and Agriculture Sector 

12. January 21, WWBT 12 Richmond - (Virginia) Fire at Henrico Nabisco factory under 
investigation. A portion of the Nabisco factory in Henrico was taken temporarily out 
of service following a January 20 fire that was isolated to a second-floor over and a 
vent stack leading to the plant’s roof. Authorities are investigating the cause of the fire. 
Source: http://www.nbcl2.com/storv/27901332/fire-at-henrico-nabisco-factory-under- 
investigation 

13. January 21, Reuters - (Washington) New outbreak of avian flu found in Washington 
state. A third outbreak of avian flu was detected in Washington prompting authorities 
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to warn bird owners January 20 to keep their flocks away from migratory birds and to 
report sick birds or unusual bird deaths. About 120 backyard chickens, geese, and 
ducks in Clallam County were culled by agriculture officials January 18 due to 
confirmed infections of the highly pathogenic H5N2 strain of avian flu, while 
authorities reported that the virus has not been detected in commercial poultry and there 
was no immediate public health concern. 

Source: http://www.reuters.com/article/2015/01/20/us-usa-washington-bird-flu- 
idUSKBN0KT2FU201 50120 



14. January 20, Associated Press - (Missouri) Tyson Foods to pay $539,000 for spill in 
southwest Missouri. The Missouri Attorney General announced January 20 that Tyson 
Foods Inc., agreed to pay more than $530,000 to resolve charges connected to a June 
2014 discharge of Alimet from Tyson’s Aurora facility into the town of Monett’s 
wastewater system causing it to fail and sending contaminated water into Clear Creek 
in Barry County which resulted in a 100,000 fish kill. The settlement also required 
Tyson to take steps to prevent similar incidents in the future, prepare a hazardous waste 
manifest before transporting any such thing in Missouri, and be subject to state 
inspections at the Monett and Aurora facilities at any time. 

Source: http://www.stltodav.com/business/local/tvson-foods-to-pav-for-spill-in- 
southwest-missouri/article f0claf7a-d669-5834-8ea9-ba47ced4dla2.html 



15. January 19, KWTX 10 Waco - (Texas) Texas pecan processing plant goes up in 
flames. A January 17 fire at the Leonard’s Big Valley Pecan Farm processing plant in 
Texas caused an estimated $1 million in damage to the structure and 100,000 pounds of 
pecans contained inside the business. Authorities are investigating the cause of the fire 
that apparently started near dryers inside the building. 

Source: http://www.freshplaza.com/article/133916/Texas-pecan-processing-plant-goes- 
up-in-flames 
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Water and Wastewater Systems Sector 

16. January 20, Iowa City Press-Citizen - (Iowa) About 9,100 affected by boil advisory 
in Coralville. A boil water advisory was issued as a precaution January 20 - 22 for 
about 9,100 residents in north Coralville after a water main break. The break was 
repaired and officials continue testing the water for bacteria. 

Source: http://www.press-citizen.com/storv/news/local/2015/01/20/boil-advisory- 
issued-nw-coralville/2206 1873/ 

17. January 20, Associated Press - (Montana) Cancer-causing agent detected in water 
after pipeline spill. The U.S. Centers for Disease Control and Prevention reported 
January 19 that elevated levels of benzene were found in water samples from a 
treatment plant that serves approximately 6,000 people in the community of Glendive, 
Montana, after 50,000 gallons of oil spilled from the Bridger Pipeline Co. -owned 
Poplar pipeline into the Yellowstone River January 17. Operations at the water 
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treatment plant were halted indefinitely. 

Source: http://news.yahoo.com/cancer-causing-agent-detected-water-pipeline-spill- 
143731937.html 



For additional stories, see items 3 and 27 
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Healthcare and Public Health Sector 

18. January 21, CMV- (Massachusetts) Boston doctor dies after hospital shooting; 
suspect dead. A gunman died from a self-inflicted gunshot wound after shooting and 
killing a doctor at Brigham and Women’s Hospital in Boston January 20. The suspect 
entered the hospital and asked to speak with the doctor prior to the shooting. 

Source: http://www.cnn.com/2015/01/20/iustice/boston-hospital-shooting/ 

19. January 20, Tallahassee Democrat - (Florida) AG Medicaid unit arrests six from 
Leon County. An investigation by the Florida attorney general’s office led to the arrest 
of six Leon County case managers employed with DS Connections in Tallahassee in 
connection to defrauding the Medicaid program out of more than $170,000. The 
investigation found that the individuals did not meet the criteria for providing case 
management services and that the group allegedly filed false claims to Florida 
Medicaid by improperly billing for mileage and billing for extraneous services for 
clients. 

Source: http://www.tallahassee.com/story/news/2015/01/20/ag-medicaid-unit-arrests- 
six-from-leon-county/22055 107/ 



For additional stories, see items 13 and 30 
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Government Facilities Sector 

20. January 21, Los Angeles Times - (California) Two National Guard soldiers hurt in 
San Diego County helicopter crash. Authorities are investigating a California Army 
National Guard helicopter crash in northeast San Diego County that left two soldiers 
with minor injuries January 20 after the helicopter crashed at the end of the runway at 
Ramona Airport during a routine training mission. 

Source: http://www.latimes.com/local/lanow/la-me-ln-national-guard-helo-20150121- 
story.html 

21. January 17, Yuma Arizona News - (New York) FDA employee, former corrections 
officer, and former IRS employee charged in multimillion dollar tax refund 
conspiracy. Three New York residents, including 1 former U.S. Department of Justice 
and Internal Revenue Service (IRS) employee, were indicated in federal court in 
Brooklyn January 15 for defrauding the U.S. government more than $3.4 million by 
filing false claims. 
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Source: http://www.yumanewsnow.com/index.php/news/latest/9378-fda-emplovee- 

former-corrections-officer-and-former-irs-employee-charged-in-multimillion-dollar- 

tax-refund-conspiracy 

For another story, see item 24 
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Emergency Services Sector 

22. January 20, WHAG 25 Hagerstown - (West Virginia) Potomac Highlands Regional 
Jail evacuated. Authorities evacuated and transported 220 inmates from the Potomac 
Highlands Regional Jail in Hampshire County to neighboring jails January 20 after a 
regulator malfunctioned and caused an issue with facility’s gas line. Officials expect 
the jail to reopen 24 to 72 hours after repair work is completed. 

Source: http://www.vour4state.eom/storv/d/storv/potomac -highlands-regional-jail- 
evacuated/28648/OxlQeUPfakGdKLeFDUvakg 

23. January 20, Tampa Tribune - (Florida) Disturbance at Tampa juvenile detention 
facility leads to arrests. Deputies arrested seven juveniles at the Florida Department 
Juvenile Detention Center East- Lake Academy Girls Wing in Tampa January 18 
following reports of a riot at the facility. Staff members and police gained control of the 
inmates after they refused to follow orders and became combative. 

Source: http://tbo.com/news/crime/disturbance-at-tampa-iuvenile-detention-facility- 
leads-to-arrests-20150120/ 



For another story, see item 29 
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Information Technology Sector 

24. January 21, Securityweek - (International) Siemens fixes vulnerabilities in 
SCALANCE, SIMATIC solutions. Siemens released firmware updates for the 
SCALANCE X-300 switch family and SCALANCE X408 running firmware versions 
prior to 4.0 to address denial of service (DoS) vulnerabilities that can be exploited by 
an unauthenticated attacker to cause a device to reboot by sending malformed HTTP 
requests or sending specifically crafted network packets to the device’s FTP server. 
Source: http://www.securityweek.com/siemens-fixes-vulnerabilities-scalance-simatic- 
solutions 

25. January 21, Softpedia - (International) Ransomware incidents on an upward trend, 
FBI warns. The FBI issued an alert January 20 and warned computer users of a newer 
variant of the CrytoWall data encryption malware that infects computers and restricts 
users’ access to files until a fee is paid and the files are unlocked. The malware has 
been spotted in the wild, featuring localized ransom messages and trying to connect to 
decryption services hidden in the Invisible Internet Project (I2P) network. 
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Source: http://news.softpedia.com/news/Ransomware-Incidents-On-An-Upward-Trend- 
FBI-Warns-470683.shtml 



26. January 21, Krebs on Security - (International) Java patch plugs 19 security holes. 
Oracle released its quarterly patch update for Java, closing at least 19 security 
vulnerabilities including 13 flaws that are remotely exploitable. 

Source: http://krebsonsecuritv.com/2015/Ql/iava-patch-plugs-19-securitv-holes/ 

27. January 21, Threatpost - (International) Hard-coded FTP credentials found in 
Schneider Electric SCADA Gateway. Schneider Electric released an update to 
address 2 flaws for their ETG3000 FactoryCast HMI Gateway, which is used in 
manufacturing, energy, water, and other industries as a Web-based SCADA system that 
could allow unauthenticated remote access to the device’s FTP server and configuration 
files. 

Source: http://threatpost.com/hard-coded-ftp-credentials-found-in-schneider-electric- 
scada-gateway/1 10565 

28. January 19, Threatpost - (International) Potential code execution flaw haunts 
PolarSSL library. Researchers at Certified Secure discovered a vulnerability in 
PolarSSL, an open-source SSL library, which could enable an attacker to execute 
remote code execution and a denial of service (DoS) attack. 

Source: http://threatpost.com/potential-code-execution-flaw-haunts-polarssl- 
library/1 10505 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



29. January 20, New York Daily News - (National) Viacom, ESPN hit with $1.4M FCC 
fine for using warning tones while promoting ‘Olympus Has Fallen’. The U.S. 
Federal Communications Commission issued a $1.12 million fine against Viacom and a 
$280,000 fine against ESPN January 20 for using Emergency Alert System warning 
tones for non-emergency purposes while promoting a movie on cable networks in 2013. 
Source: http://www.nvdailynews.com/news/politics/fcc-fines-viacom-espn-warning- 
tones-promoting-film-article- 1.2086034 

For another story, see item 24 
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Commercial Facilities Sector 



30. January 21, Los Angeles Times - (California) Several Disneyland workers diagnosed 
with measles. Health officials confirmed January 20 that at least 5 Disneyland 
employees have been diagnosed with measles bringing the total number of cases in an 
outbreak tied to the amusement park to 53. Disneyland officials requested that any 
employees who had not been vaccinated or could not prove their immunity status take 
paid leave until their status is confirmed. 

Source: http://www.msn.com/en-us/news/us/several-disneyland-workers-diagnosed- 
with-measles/ar-AA8piqG 

31. January 20, San Francisco Bay City News - (California) Major gas leak in San Jose 
sends gas bubbling up through street. Twelve businesses at the Eastridge Center 
shopping mall in San Jose were evacuated and closed January 20 after a third-party 
contractor accidentally struck a 4-inch gas distribution line. The stores and local 
roadways were expected to reopen January 21 after crews made repairs to the line 
which were estimated to take about 16 hours to complete. 

Source: http://www.sfgate.com/bavarea/article/Maior-gas-leak-in-San-Jose-sends-gas- 
bubbling-up-6029064.php 

32. January 19, Grays Harbor Daily World - (Louisiana) Police investigating Wal-Mart 
bomb threat. About 100 customers and dozens of employees were evacuated from a 
Walmart store in Opelousas while police investigated a bomb threat that came through 
a 9-1-1 call. Police searched the scene and cleared the store to reopen more than 3 
hours later after nothing suspicious was found. 

Source: http://www.dailvworld.com/storv/news/local/2015/01/18/clear-wal-mart-bomb- 
threat/21979413/ 
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Dams Sector 

See item 24 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 10 - 




